Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa
File:                     3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          /qteiQPQZenJXmT1DLo/co8WAzozopgajUAARS8H7wk=
Subject key identifier:   04:E6:2E:4F:02:81:44:22:10:E0:E4:5E:91:AE:DF:1E:9A:A4:F6:19
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       2B4ECF762C44D14B7039C7DB63833660D0D66EC7
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa
Signing time:             Mon 06 May 2024 01:59:14 +0000
ROA not before:           Mon 06 May 2024 01:54:14 +0000
ROA not after:            Mon 05 May 2025 01:59:14 +0000
asID:                     262417
IP address blocks:        186.219.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4e:cf:76:2c:44:d1:4b:70:39:c7:db:63:83:36:60:d0:d6:6e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: May  6 01:54:14 2024 GMT
            Not After : May  5 01:59:14 2025 GMT
        Subject: CN=04E62E4F0281442210E0E45E91AEDF1E9AA4F619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:27:71:83:14:4f:57:73:02:89:74:1b:9a:
                    0c:95:81:ea:fd:f2:94:fe:fc:b5:77:54:8c:2a:92:
                    ed:bb:df:c3:3c:35:c1:ac:dd:66:05:ee:83:7f:fa:
                    fa:52:20:b1:c7:34:fb:82:59:b9:c3:16:05:b4:aa:
                    39:de:e2:4f:af:62:3c:86:16:65:55:24:46:73:8c:
                    67:84:71:04:c9:25:1b:4a:10:d9:42:dc:d7:a8:70:
                    5e:1b:02:64:7b:0d:9b:ed:9d:f7:0b:8c:a2:4e:3f:
                    da:dc:bb:ee:17:74:a0:24:e3:c0:fb:d5:20:19:7e:
                    0e:6f:fb:a3:6d:a6:28:8d:83:d4:ac:04:c3:8f:84:
                    ca:d1:c3:94:96:ba:a2:2e:1e:9f:bc:33:80:fd:0a:
                    0f:85:0e:32:a4:a2:6b:18:2c:c9:ea:92:a6:cc:e5:
                    0e:7d:52:f8:cd:de:c7:a8:76:77:ea:ba:84:30:65:
                    24:f1:9f:5d:fd:da:ae:6e:d8:e5:d0:cf:30:f8:51:
                    c2:3a:5f:0e:3b:a0:b9:db:c6:58:e8:63:04:2a:14:
                    16:bd:f6:07:10:74:ec:fc:4c:53:67:2b:ef:35:b3:
                    7d:57:49:b2:78:2c:a9:49:d0:6d:30:9e:5e:6d:de:
                    8d:e0:68:71:b5:c8:88:ad:32:eb:3a:28:bf:fd:bd:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E6:2E:4F:02:81:44:22:10:E0:E4:5E:91:AE:DF:1E:9A:A4:F6:19
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:41:e2:31:4a:41:cc:e6:b9:ed:2d:5a:82:85:8a:1f:f1:d1:
         5d:47:2d:a3:3f:48:0a:8a:4c:72:24:37:8b:c6:6f:66:22:35:
         47:e5:ab:d8:44:55:07:05:85:40:4c:5e:31:24:3e:f0:45:63:
         59:32:e0:10:70:b1:6b:7a:4f:72:8b:a1:8b:32:61:21:85:92:
         a6:0f:bf:e7:d6:d0:1f:15:78:b2:0f:7f:bc:64:4b:a8:89:16:
         01:bf:dc:4f:19:84:3d:0e:1c:73:fd:b7:03:3b:6c:1d:eb:de:
         f4:04:ee:d6:c7:e1:77:dd:06:81:d1:94:27:ed:d4:6e:98:10:
         0a:07:e5:60:79:a2:59:f9:6c:01:68:e1:74:35:f2:c2:1d:ce:
         6e:be:d6:86:7c:99:28:ba:df:a1:a2:32:51:23:11:1f:8e:24:
         c7:83:24:a7:a2:c7:16:3a:99:1c:2d:fd:0d:35:c2:94:d1:fb:
         d6:17:0a:9d:98:65:7a:74:24:82:5b:56:09:82:a1:5f:52:ee:
         30:0a:ae:f1:9d:1e:41:53:b1:f3:c4:fe:0f:71:0c:be:62:3f:
         5f:16:21:7e:d7:bd:32:ac:9b:b6:3a:29:e3:51:60:d4:99:27:
         e7:20:e2:cc:eb:32:a3:13:2e:f5:da:fc:32:db:56:92:d4:0a:
         11:e1:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:41 2024 by rpki-client on console-fra.rpki-client.org